Sunday , October 25 2026

5 Institutions add to CII list: ICT State minister

BRTA, Vaccine Management System, Health Department’s MIS, Land Record System, Rural Electricity will be added to the Critical Information Infrastructure or (CII) list, said ICT State Minister Zunayed Ahmed Palak.

He gave this information to the journalists after the review meeting to the progress of preparation on possible cyber attack on 15 August on Wednesday (August 9).

Daily Cyber security update for 24. 10. 2026

Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...
Read More
Daily Cyber security update for 24. 10. 2026

PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation

The PHP security team shared ways to protect against a new flaw that lets someone run unwanted code on certain...
Read More
PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation

US banks faced unauthorized access by AI agents in customer accounts: Axios reports

Major US banks have detected unauthorized access to customer accounts by third-party AI agents, with some systems taking actions beyond...
Read More
US banks faced unauthorized access by AI agents in customer accounts: Axios reports

Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager

Fortinet has urged customers to prioritize security updates for FortiOS, FortiManager, and FortiAnalyzer scheduled for October 22, 2026. The coordinated...
Read More
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager

Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed

Hacker offers to sell Rajasthan Government’s Department of Information Technology & Communication (DoIT&C) data in a underground forum. The threat...
Read More
Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed

Update now! PHP2Shell: Critical PHP vulnerabilities patched

The PHP team released urgent security updates to fix PHP2Shell, two serious flaws (CVE-2026-109618 and CVE-2026-109619) that let attackers run...
Read More
Update now! PHP2Shell: Critical PHP vulnerabilities patched

Trump says data centres should pay dividends to local community

US President Donald Trump said on Wednesday that companies ​building data centers should pay a "dividend" to the communities ‌where...
Read More
Trump says data centres should pay dividends to local community

Hackers Actively Exploiting Palo Alto VPN Flaw Via CVE-2026-0257

Ransomware groups are using a flaw in Palo Alto Networks GlobalProtect VPN to get around multi-factor authentication and access corporate...
Read More
Hackers Actively Exploiting Palo Alto VPN Flaw Via CVE-2026-0257

DeepSeek AI banned by U.S. Government; federal agencies must remove all related tools

The U.S. Department of Homeland Security (DHS) ordered federal agencies to stop using DeepSeek products and remove it from all...
Read More
DeepSeek AI banned by U.S. Government; federal agencies must remove all related tools

CISA, NSA and NIST Publish New 10 AI Agent Control Guidelines

NSA, CISA, and NIST have released security guidelines to find, control, and stop AI agents that go beyond their allowed...
Read More
CISA, NSA and NIST Publish New 10 AI Agent Control Guidelines

He said, on August 15, despite the fear of a major cyber attack in the country, 90 percent of CII-affiliated institutions are not considering the ICT division’s guideline seriously.

Zunayed Ahmed Palak said, “Next month, I will organize a meeting with the heads of 29 institutions including Bangladesh Bank Governor, NBR Chairman, Chief Secretary, Cabinet Secretary, So that no one can make any excuse.

About the threat of cyber attacks, he said, ‘We received messages from two important places about two weeks ago that a major cyber attack will be launched on the critical infrastructure of Bangladesh in August. I have sent that warning to 29 institutions belonging to CII.

We are doing our best to prevent attacks. Taking August 15 more seriously we have information that several groups may attack that day. There may be attacks before and after this. That warning has been given in today’s meeting.

The state minister also said, “CII-affiliated institutions are not preparing according to our warnings.” This is why the risk remains. My biggest concern is—if security guidelines are not followed and data is compromised as a result, If we lose data and money then our country can face a big loss. For this reason, I have again warned everyone today that the minimum guidelines must be followed.

Check Also

Incident Reporting

Bangladesh Launches (CIRS) and National ICT & Cyber Security Rating System (NRS)

In an important move to boost the country’s cybersecurity, Bangladesh started the Cyber Incident Reporting …